| OBJECT NAME | GUID | STATUS | FILENAME | DESCRIPTION |
|---|
| Class | {5B50572F-A9AA-1E62-1EAE-A8679709D822} | X BHO | MFC**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {8260058E-BDBF-3E7C-DE87-716A144C19AA} | X BHO | MFC**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {033935E4-A208-AB9E-DD2A-6A9B7E426D04} | X BHO | MFC**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| H | {2F1890C8-8727-4d35-9312-AFDB3A403E83} | X BHO | mcacr.dll, scacr.dll | Variant of the Infostealer.Banker.D trojan |
| Class | {5DAA3B7C-6DEC-B6D5-9597-81AFF0B315AA} | X BHO | MFC**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| XBTP06162 Class | {4616A983-0F58-4219-8908-64C5385F06B1} | O BHO | misrya.dll | Misrya.com Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Remove unless you both trust it and expressly meant to install it. |
| Class | {1C802FC2-0FBE-6831-98C8-B57153BA99B1} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {871DF81E-AF47-62AD-B624-F9791F484A5D} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| XBTP01392 | {C194FFC3-E2FF-492a-A912-375234DC3833} | O BHO | MSU-bar.dll | MSU_Toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. |
| Class | {2C24F735-E2AC-786D-323A-484CB569F1C6} | X BHO | MFC**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {E9316BCB-D8E8-3772-E707-BD8544ED75DD} | X BHO | MS**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {32A6CEC2-152D-9C47-1D16-97AAFF45661E} | X BHO | MS**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {A2C9646F-0E5D-DEF3-8150-C0F288244033} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {2FBFD3DB-44BC-5682-6544-30AA6B08CA27} | X BHO | MS**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {80CE4264-DE48-7277-BAA4-D6E07C2653A2} | X BHO | MFC**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {68DFBF9E-935E-8151-6225-E74F485DA6BF} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {0DCCFD12-627E-9E10-4B8B-9DD855E75F3D} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| eToken SSO | {a9f64b84-a711-4a02-b88e-506ec6d117db} | L TB | mscoree.dll | Alladin eToken Web Sign On |
| Class | {7B85CFF2-F260-014A-0E45-8EDD7AC7EFCA} | X BHO | MFC**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {D846D0FC-261A-7E1F-5D9C-EF98B2A7155F} | X BHO | MFC**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {315FF857-B88F-BEE4-818A-9CF1AFF4550C} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {683E36E0-F3DD-AD00-7B53-2B85FBA805B6} | X BHO | MFC**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {4E6B36BF-D0D7-A6B6-27AC-0B789B4CE791} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {3C58805B-29EF-654E-AA12-FDD30C09CEB7} | X BHO | MS**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {4D59651E-8A2E-DD1B-C94D-0E424C57E963} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {F6D7AB9F-102F-1D05-935A-3204ED81EB70} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {63FF24F4-3A79-8B02-6E12-81C9BAAFF3A0} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| {D123A09F-32E2-44EF-BF8C-A850C5F77BB3} | L BHO | mmbho.dll | Multimodal Browser Extension |
| Class | {83F78A6E-D377-2FE8-D6BD-066068180B68} | X BHO | MS**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {0E6A80F3-5F3F-91C4-0FA4-E204117F97B3} | X BHO | MFC**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {4BE20320-99C9-F9F1-6851-9438016FA6D2} | X BHO | MS**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {40D7AC6D-9124-CC43-7426-5CD773A0E5E8} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {85DDA992-E5AE-8EC1-91E7-C461EB7E41EC} | X BHO | MFC**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {092DB14D-5C39-5142-DD3F-FA5F05AC391D} | X BHO | MFC**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| {73468251-2534-8760-3685-423479197575} | X BHO | mscods.dll | Troj/Goldun-DX trojan |
| Class | {A71E634B-75F1-24E4-7CC3-007C5CF57056} | X BHO | MFC**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| mndsesrv.dll | {57FD640A-158F-48AC-FD14-1597F14A9775} | X BHO | mndsesrv.dll | Password stealer of Chinese origin detected by Trend Micro as TSPY_ONLINEG.FOK |
| Class | {CF0279FD-6CD0-71C3-707F-1BA66FBF7592} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| mikobar | {1381D183-BA6C-498C-B63F-B7143DA41905} | O TB | mikobar.2.1.dll, mikobar.*.*.dll, MIKOBA~1.DLL | MikoBar toolbar - a Softomate Toolbar variant - Softomate customizes toolbars to customers needs. The dll files for their toolbars contain some spyware/adware functionality, although not all of the toolbars use this. Some of the toolbars are fine to have, so every case is different. Your choice. |
| Class | {370869A3-BAD3-D84B-1480-C5FD0FA6D89F} | X BHO | MFC**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {D8183F1C-9C01-D1D3-181E-D6CC335BB647} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {DF9C3C9C-D1FD-410C-A2CE-1AD849CC1EFD} | X BHO | MS**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Flash.Macromedia | {6EEF174A-FFA8-4524-B5B3-49516E8F59AE} | X BHO | MediaPlayer.dll | Unidentified parasite - should you have any information about this application, such as for example the site where it was downloaded or installed, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks! |
| Class | {58BA44D2-4E05-CF21-D46C-343B479557D8} | X BHO | MFC**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| MySidesearch Search Assistant | {C17E102B-BD29-4e92-B699-1A21D2CB8E6C} | X BHO | mysidesearch_sidebar.dll | MySideSearch adware, an AdRotator/IconAds variant also detected as Adware.FotoMoto - redirects searches to mysideseach.com |
| Class | {C34102CE-6CAF-795E-0E08-3B7627D81F73} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {25AF3C5D-47A8-D27C-6010-C7B013E4E22A} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {8A69E279-05B8-E5C6-D906-19716EF1A6B0} | X BHO | MFC**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {3D4E083C-1675-13A0-513B-459B912F9DA1} | X BHO | MS**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| MS Video Control 1.0 | {AD50B648-6165-46EE-9FA9-81F73D8F84DA} | X BHO | msvidc32.dll | Downloader trojan, member of the FakeAlert aka SmitFraud malware family - produces IEDefender or similar popups - also see here |
| Class | {52CB9176-0942-9A96-3BC7-AA2295EA037F} | X BHO | MS**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| Class | {8F990BB6-92DA-5618-847A-5DD4057B1ECE} | X BHO | MS**.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| MorpheusToolbar BHO | {3F3714A1-89A4-46be-8AF3-D0C9D1FB03F9} | O BHO | MORPHBAR.DLL | Morpheus Toolbar |
| Class | {2AA0FE3E-BB7C-7DE4-3FD1-D24B5ACFB827} | X BHO | MFC**32.DLL (* = random char) | CoolWebSearch/HomeSearch adware component |
| MHHlprObj Class | {D0543C13-1424-4685-B1FE-20DE3C539E9D} | ? BHO | mhhelper.dll | Unidentified browser plugin of Chinese origin - should you have any information about this application, such as its exact purpose and whether you did or did not install it wittingly, do email us - if you actually have a copy of the file, please attach it to your email for analysis. Thanks! |
